CVE-2023-34454

🗓️ 15 Jun 2023 16:27:45Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 379 Views

snappy-java integer overflow may cause fatal erro

Reporter	Title	Published	Views	Family All 69
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to denial of service attacks due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454)	29 Aug 202309:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2023	26 Mar 202504:03	–	ibm
IBM Security Bulletins	Security Bulletin: Snappy-java is vulnerable to security CVEs used in IBM Maximo Application Suite - Monitor Component	24 Jul 202321:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management	14 Feb 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Kafka nodes in IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a denial of service due to snappy-java (CVE-2023-34453, CVE-2023-34455, CVE-2023-34454).	14 Aug 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Asset Data Dictionary Component uses zookeeper-3.5.9.jar and snappy-java-1.1.8.3.jar which are vulnerable to CVE-2023-44981,CVE-2023-34453, CVE-2023-34455 , CVE-2023-34454 and CVE-2023-43642	7 Jun 202406:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.	27 Mar 202415:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple denial of Service vulnerabilities in snappy-java may affect IBM Business Automation Workflow (CVE-2023-34453, CVE-2023-34454, CVE-2023-34455)	1 Sep 202319:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator affected by multiple vulnerabilities due to snappy-java	22 Feb 202416:22	–	ibm

NVD

Vulners

Node

xerial snappy-javaRange<1.1.10.1

[
  {
    "vendor": "xerial",
    "product": "snappy-java",
    "versions": [
      {
        "version": "< 1.1.10.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/xerial/snappy-java/security/advisories/GHSA-fjpj-2g6w-x25r
github	www.github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java
github	www.github.com/xerial/snappy-java/commit/d0042551e4a3509a725038eb9b2ad1f683674d94
github	www.github.com/xerial/snappy-java/blob/master/src/main/java/org/xerial/snappy/Snappy.java
github	www.github.com/xerial/snappy-java/blob/05c39b2ca9b5b7b39611529cc302d3d796329611/src/main/java/org/xerial/snappy/Snappy.java

12 Dec 2024 17:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.9 - 7.5

EPSS0.00667

SSVC

CWE-190